Is equilibriumg.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Equilibrium Games presents itself as a Web3 gaming studio that is running a live "Phase I" claim window for an EQ token allocation on the XRP Ledger. The single-page site shows a claim portal where a visitor enters a public XRP address to receive tokens, alongside a roadmap that promises an in-game economy and a future "Season Zero" client. Its apparent purpose is to distribute and promote a newly issued crypto token, with monetisation deferred to a planned game economy.

Scam/Impersonation Risk

The assessment carries clear, confirmed contradictions. Independent threat-intelligence engines currently flag the domain as malicious, including one tier-one security vendor, and the domain is on a confirmed blacklist. No brand impersonation, phishing form or conflicting legal identities were observed, so the elevated risk rests on the external detections and the weak content signals. Several of the site's claims do not hold up against what it publishes. The homepage says its Merkle root was "independently audited" but names no auditor. It calls its weighting "provably fair" but publishes no formula. It cites a "verified" ledger snapshot with no way to check how holders are weighted. It also shows a tidy total supply of 1,000,000,000 EQ and an allocation pool of 180,000,000 EQ, with a progress counter of 62.4% claimed across 48,213 wallets. These figures are unsupported on the page and carry the hallmarks of staged social proof on a very new domain. Eligibility depends on holding EQ, EQ Series or SECWarriorClub NFTs, which makes the value flow opaque. The site does state that it will request only a public address and a negligible network fee, and that is a mitigating point. However, behavioural testing showed the page sending POST and XHR traffic to external destinations that are not on any recognised allow-list, and a high share of its requests went to third parties. The site is also young, and its page quality is weak. These factors together are consistent with a claim-lure pattern of the kind used to funnel users into follow-on wallet interactions. They do not prove it. Evidence:

• Domain registered on 2026-10-03 (~16 days old) through NICENIC INTERNATIONAL GROUP CO., LIMITED, expiring 2027-10-03.
• Web archive holds only 3 snapshots, spanning 2026-10-03 to 2026-10-11 (1 year tracked), so there is no prior history behind the project.
• Homepage claim portal: "audited" Merkle root with no named auditor, "provably fair" weighting with no formula, and a 62.4% claimed / 48,213 wallets counter.
• Sandbox runs of the homepage: 3 of 3 external POST requests and 3 of 6 external XHR requests went to non-whitelisted destinations.

Regulatory Verification Notes

The homepage identifies no legal entity, team, registered address or contact channel for Equilibrium Games. It claims no licence, registration or regulated status, and none could be independently matched. Real-world operator identity therefore remains unverified, and the site's own statements cannot stand in for that. Third-party broker databases hold no record of the project. That is absence of context, not a regulatory finding. The page makes offers that carry token-distribution and consumer-protection implications, but it gives no terms, jurisdiction or accountable party to which a claimant could turn if something went wrong. Evidence:

• Homepage lists no company name, team, physical address or contact method alongside the claim portal.
• Hosted on AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by YE1 (DV, domain validation only), valid to 2027-01-01. This confirms encrypted transport only and says nothing about who operates the site.

What to Verify Next

Any interaction should wait until the operator is identified through sources independent of the site. The issuing XRP Ledger account for EQ should be inspected on a public ledger explorer to confirm the supply, the holder distribution and the issuer's history. The "independent audit" should be requested by name and confirmed with the auditing firm directly, and the Merkle root should be reproduced rather than taken on trust. Any official social or support channels should be confirmed through an independent, offline route. The registry in the operator's claimed jurisdiction should also be checked for a licence or registration if one is later asserted. Evidence:

• Homepage Merkle root and ledger snapshot figures can be compared against on-ledger data.
• The homepage links to no external channels or social presence, so none can be cross-checked from the site.
• The roadmap's "Season Zero" client and in-game economy are presented without any named studio or product page.

Summary Verdict

The site carries an elevated risk posture. Confirmed external threat detections, a very new domain with no history and unsubstantiated trust claims outweigh its otherwise orderly appearance and working technical hygiene. The overall assessment is clearly cautionary and security-forward, and the operator's identity is unverified.

Infrastructure Integrity

The site sits behind a mainstream edge network, with Cloudflare as the observed hosting provider, and all observed addresses are edge nodes, so the origin server was not visible. This is a mitigating factor only. It prevents independent verification of the true hosting and can mask rapid content changes, and it does not offset the reputational detections. An unconfirmed heuristic notes a young domain with sparse subdomains, which is consistent with a new deployment.

Closing Assessment

The site should be treated as read-only. Account logins, credential entry, wallet connections, address submission through the claim portal and any financial interaction should be avoided until the external detections are cleared and the operator is independently identified.